Hacker News new | ask | show | jobs
by Retr0id 168 days ago
Why would you use PBKDF2 here?
1 comments
imgopaal 168 days ago
I went with PBKDF2 mostly because of its wide support and compliance history, but I’d love to hear your take on what you’d recommend.
link
pabs3 167 days ago
PBKDF2 is pretty obsolete crypto, argon2i I think is the latest for converting passphrases to keys. For generating keys, just use entropy instead.
link
Retr0id 167 days ago
If your input is a key and not a passphrase, you can just use a regular KDF. PBKDF2 is a waste of clock cycles.

Also, your site still says "E2EE" on the homepage, you should remove that.

link